EIP-2026-114066

This exploit demonstrates an arbitrary file upload vulnerability in WordPress Templatic Tevolution <= 2.3.6. The PoC uses a cURL command to upload a file to a vulnerable endpoint, allowing potential remote code execution if the uploaded file contains malicious content.